MEDIUMPackagist
GHSA-38cx-cq6f-5755· CVE-2026-48736Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient
Modified: 9/10/2026
package
Packagist/symfony/http-client
pkg:packagist/symfony/http-client
LOW3.1Packagist
GHSA-9c3x-r3wp-mgxm· CVE-2024-50342Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Modified: 2/3/2026